Legal information
Privacy policy
This privacy policy explains, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), which personal data is processed when you visit this website, for what purposes and which rights you have.
1. Controller
Dr Wolfgang Zinser, ArthroConcept, Gaalerstraße 69, 8720 Knittelfeld, Austria. Telephone: +43 664 534 3076 (OrthoExpert practice). Email: info@arthroconcept.com.
2. Hosting and server log data
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel processes technically necessary connection data, such as IP address, time of access, requested URL, referrer, browser and operating-system information, HTTP status and transferred data volume. Processing is based on Art. 6(1)(f) GDPR for reliable operation, IT security and prevention of misuse. Processing in the USA or other third countries may occur; Vercel participates in the EU-US Data Privacy Framework and uses additional safeguards where required. Log data is retained only as long as necessary for operation, security, legal obligations or legal claims.
3. Contact
If you contact us by email or telephone, we process your contact details and the content and time of your enquiry in order to respond. The legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual matters and otherwise Art. 6(1)(f) GDPR. Data is deleted when the enquiry has been completed unless retention duties or legitimate interests require otherwise.
4. Newsletter
When you subscribe to the newsletter, we process your email address and technical registration data on the basis of your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time through the unsubscribe link or by emailing info@arthroconcept.com. We use Brevo GmbH / Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, as our processor. To protect the form against automated submissions, Google reCAPTCHA is loaded automatically when the form is submitted, irrespective of the cookie-banner selection. Google Ireland Limited may process IP, browser, device and usage data and may transfer data to the USA. This security processing is based on Art. 6(1)(f) GDPR and our legitimate interest in preventing misuse and spam.
5. Cookies, analytics and marketing services
We do not use web analytics, advertising, tracking or social-media plug-ins and do not create user profiles. Your cookie-banner selection is stored locally as a necessary preference. The technically necessary ac_locale cookie stores only the language code de, en or es for up to one year on arthroconcept.com and its subdomains so that your language selection is retained. Google reCAPTCHA is loaded automatically only when a newsletter form is submitted and may set the _GRECAPTCHA cookie.
6. Local fonts
Fonts are served locally by this website. No connection to external font providers is made when displaying text.
7. External links
This website contains links to external websites. A connection to the relevant provider is established only when you follow a link. The respective provider is responsible for subsequent processing.
8. Recipients and data transfers
Personal data is received only by parties that need it for the purposes described, in particular Vercel, Brevo and Google when reCAPTCHA is used, including their processors. Other disclosure occurs only with a legal basis, legal obligation or your consent.
9. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with future effect. Contact info@arthroconcept.com to exercise your rights.
10. Right to lodge a complaint
You may lodge a complaint with a data-protection authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
11. Automated decisions
No solely automated decision-making, including profiling under Art. 22 GDPR, takes place.
12. Security and updates
We use appropriate technical and organisational safeguards. Data is transmitted over TLS/HTTPS. This policy is updated when functions, services or applicable law change. Last updated: 17 October 2026.